Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
File:                     1-c0pgMHHi89rubgKB5IFiwvK7Us.mft (raw, json)
Hash identifier:          +jb3+hEM7FDHF2SqECH/1ZnFwLrsihlO8X93dEpkPfc=
Subject key identifier:   72:96:6D:E8:42:D1:DA:6A:49:11:5F:76:B3:67:FC:58:8E:D0:B4:44
Authority key identifier: F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B
Certificate issuer:       /CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
Certificate serial:       019D27A90FE17EBF44FD4AA6617303DC02BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
Manifest number:          1845
Signing time:             Thu 26 Mar 2026 01:01:24 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:24 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:24 +0000
Files and hashes:         1: 1-c0pgMHHi89rubgKB5IFiwvK7Us.crl (hash: KJ33cikuI5Fy/MSA8Yq5mGq6PKWBQRDiaFmoWjm4YAk=)
                          2: IjQ6OXkHd97zyTTXFkCYM_KMp5w.roa (hash: 60iQn92KHp6H4icJkgsF/2o05bPMtszkQ7f+dqj/Mrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:0f:e1:7e:bf:44:fd:4a:a6:61:73:03:dc:02:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9cd2980c1c78bcf6bb9b80a0792058b0bcaed4b
        Validity
            Not Before: Mar 26 01:01:24 2026 GMT
            Not After : Mar 27 01:01:24 2026 GMT
        Subject: CN=72966de842d1da6a49115f76b367fc588ed0b444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a5:fd:aa:a4:16:26:28:21:36:87:78:08:9c:
                    fd:95:71:13:4b:f6:51:14:b0:5f:81:d4:96:66:22:
                    db:9a:d6:2d:1c:e0:32:e6:fb:d8:6f:4a:1b:51:65:
                    4b:78:87:de:ed:fa:e7:8d:6e:11:ec:d1:5d:5a:1b:
                    ef:9c:71:30:9e:85:8b:a8:86:9a:55:5a:c7:26:43:
                    86:10:9c:4f:2e:65:a7:b6:e9:18:19:80:a6:44:b7:
                    d6:6f:25:8c:2b:c8:68:92:1f:d5:bc:ce:50:ec:92:
                    22:68:3c:67:37:dc:18:32:09:00:f4:bd:ef:f8:56:
                    8c:11:ed:2a:36:2f:02:32:7c:f5:03:3c:cc:bb:7a:
                    5e:bc:5d:42:97:34:92:3e:23:34:44:76:6f:03:bb:
                    37:7d:c8:c3:14:1a:1f:f4:90:c8:8f:32:fc:96:38:
                    eb:b7:48:d6:ac:7e:88:4e:77:e3:55:e3:4b:05:6c:
                    18:c7:46:e8:d7:45:be:d0:e0:ed:98:c6:a2:31:6c:
                    c0:08:62:b8:f7:76:2c:2e:aa:6e:61:e2:b7:29:61:
                    40:a1:2f:bf:b0:36:3c:8a:6c:f8:62:e8:da:7a:bb:
                    26:90:2d:79:97:f2:14:16:5a:f2:ba:ea:d2:7f:31:
                    39:a0:27:31:74:43:18:ef:95:ee:2f:2e:60:63:2e:
                    4b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:96:6D:E8:42:D1:DA:6A:49:11:5F:76:B3:67:FC:58:8E:D0:B4:44
            X509v3 Authority Key Identifier:
                keyid:F9:CD:29:80:C1:C7:8B:CF:6B:B9:B8:0A:07:92:05:8B:0B:CA:ED:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c0pgMHHi89rubgKB5IFiwvK7Us.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c8797b-02e0-4718-bdfd-0929cbcdb7aa/1/1-c0pgMHHi89rubgKB5IFiwvK7Us.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:91:5d:52:f5:76:4a:4c:b8:45:ae:33:66:0e:6b:e1:61:32:
         38:f2:2f:37:54:8f:ea:b4:c6:a4:fa:04:7b:5d:92:f5:a4:fc:
         05:1d:94:04:57:84:fb:d9:2e:35:4d:c1:45:4c:62:be:00:ef:
         9f:6c:bf:e3:10:0b:87:86:75:9f:00:ff:0b:fd:d3:8d:c9:49:
         d6:1d:3d:d0:ed:b9:98:78:c1:0e:2c:5b:6b:9c:78:37:6e:61:
         74:8c:61:92:bf:b2:d4:06:a8:a2:20:b7:31:72:af:fd:bf:75:
         06:f3:c7:24:d3:41:e2:bc:05:f7:45:0f:39:9c:e9:42:73:ea:
         35:c3:cc:26:72:dc:03:dc:5d:d0:2d:fe:18:0f:c4:72:fd:f7:
         c2:5f:4c:07:ec:9a:10:15:e2:6c:72:2c:bb:b0:35:2a:ca:67:
         16:81:86:db:97:9f:55:46:a7:4a:67:8d:6d:2e:d1:ec:e5:e4:
         b8:7e:d2:e0:e3:be:9e:6b:43:b4:c7:03:b0:1c:ec:2a:33:a6:
         cf:2f:2b:0a:f8:60:08:4f:a3:63:b0:11:7c:84:3e:b5:1b:fb:
         28:fa:c9:1f:bc:dd:e5:cc:57:a7:77:b1:65:dc:6e:88:7f:dc:
         03:ad:b8:b1:56:df:95:05:2f:32:23:7a:43:81:e9:f5:45:8e:
         4e:88:77:c6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0nqQ/hfr9E/UqmYXMD3AK/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5Y2QyOTgwYzFjNzhiY2Y2YmI5YjgwYTA3OTIwNThiMGJj
YWVkNGIwHhcNMjYwMzI2MDEwMTI0WhcNMjYwMzI3MDEwMTI0WjAzMTEwLwYDVQQD
Eyg3Mjk2NmRlODQyZDFkYTZhNDkxMTVmNzZiMzY3ZmM1ODhlZDBiNDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6X9qqQWJighNod4CJz9lXETS/ZR
FLBfgdSWZiLbmtYtHOAy5vvYb0obUWVLeIfe7frnjW4R7NFdWhvvnHEwnoWLqIaa
VVrHJkOGEJxPLmWntukYGYCmRLfWbyWMK8hokh/VvM5Q7JIiaDxnN9wYMgkA9L3v
+FaMEe0qNi8CMnz1AzzMu3pevF1ClzSSPiM0RHZvA7s3fcjDFBof9JDIjzL8ljjr
t0jWrH6ITnfjVeNLBWwYx0bo10W+0ODtmMaiMWzACGK493YsLqpuYeK3KWFAoS+/
sDY8imz4YujaersmkC15l/IUFlryuurSfzE5oCcxdEMY75XuLy5gYy5LmQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHKWbehC0dpqSRFfdrNn/FiO0LREMB8GA1UdIwQY
MBaAFPnNKYDBx4vPa7m4CgeSBYsLyu1LMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1jMHBnTUhIaTg5cnViZ0tCNUlGaXd2SzdVcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzIvYzg3OTdiLTAyZTAtNDcxOC1iZGZk
LTA5MjljYmNkYjdhYS8xLzEtYzBwZ01ISGk4OXJ1YmdLQjVJRml3dks3VXMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzcyL2M4Nzk3Yi0wMmUwLTQ3MTgtYmRmZC0wOTI5Y2JjZGI3
YWEvMS8xLWMwcGdNSEhpODlydWJnS0I1SUZpd3ZLN1VzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZFd
UvV2Sky4Ra4zZg5r4WEyOPIvN1SP6rTGpPoEe12S9aT8BR2UBFeE+9kuNU3BRUxi
vgDvn2y/4xALh4Z1nwD/C/3TjclJ1h090O25mHjBDixba5x4N25hdIxhkr+y1Aao
oiC3MXKv/b91BvPHJNNB4rwF90UPOZzpQnPqNcPMJnLcA9xd0C3+GA/Ecv33wl9M
B+yaEBXibHIsu7A1KspnFoGG25efVUanSmeNbS7R7OXkuH7S4OO+nmtDtMcDsBzs
KjOmzy8rCvhgCE+jY7ARfIQ+tRv7KPrJH7zd5cxXp3exZdxuiH/cA624sVbflQUv
MiN6Q4Hp9UWOToh3xg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:52:58 2026 by rpki-client